- 22 Jan 2025
- 2 Minutes à lire
- SombreLumière
- PDF
AAL2VerifySignatureEs
- Mis à jour le 22 Jan 2025
- 2 Minutes à lire
- SombreLumière
- PDF
Function prototype
aat_int32 AAL2VerifySignatureEs (
TDigipassBlob* DPData,
TKernelParms* CallParms,
aat_ascii* Signature,
aat_ascii* SignedDataFields [8],
aat_int32 FieldCount,
aat_int32 DeferredSignatureData
aat_ascii* aServerPublicKey,
aat_ascii* ConfirmationCode,
aat_ascii* ConfirmationCodeLength);
Description
This function is an extension of AAL2VerifySignatureEx, offering the enhanced security feature. This feature prevents potential man-in-the-middle attacks in the architecture integrating software Digipass authenticators. A server public key, such as a certificate, can be used in input to diversify the challenge.
In addition, this function introduces pre-processing on the DataFields in input; each DataField can have up to 32000 characters.
The enhanced signature validation function is supported by Digipass 110 and Digipass for Web.
Parameters
Type | Name | Use | Description |
---|---|---|---|
TDigipassBlob * | DPData | I/O | authenticator application BLOB. Upon return from the function call, this BLOB must be rewritten to the application database to reflect changes. |
TKernelParms * | CallParms | I | Structure of runtime parameters to use during this function call. |
aat_ascii * | Signature | I | String of up to 17 numeric characters, left-justified, null-terminated, or right-padded with spaces. |
aat_ascii *[8] | SignedDataFields | I | Array of 8 null-terminated strings of up to 32000 printable ASCII-EBCDIC invariant characters. This parameter holds the 8 possible data fields that are used to generate a signature. For a list of the characters that can be used for the data fields, see Supported data fields charset. |
aat_int32 | FieldCount | I | Numeric value from 1 to 8 indicating the number of data fields to use from the SignedDataFields array. |
aat_int32 | Deferred signature data | I |
|
aat_ascii * | aServerPublicKey | I | String of up to 1024 hexadecimal characters, null-terminated. This parameter is used as a diversifier to prevent man-in-the-middle attacks. If this parameter is NULL, diversification will not take place. |
aat_ascii * | Confirmation code | O | String of up to 17 numeric or hexadecimal characters, left-justified, null-terminated, or right-padded with spaces. This is the confirmation code generated by Authentication Suite Server SDK (recommended buffer size is 18 bytes). |
aat_int32 * | Confirmation CodeLength | O | Pointer to a long integer that indicates the length of the generated return host code. |
Return codes
* Specific score-based authentication codes; for more information, refer to Score-based Digipass.
Supported data fields charset
The following table lists the supported characters for the data fields of AAL2VerifySignatureEs with associated hexadecimal values in ASCII and EBCDIC.